Kaspersky ID:
KLA12303
検出日:
10/05/2021
更新日:
01/25/2024

説明

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A memory safety vulnerability can be exploited to execute arbitrary code.
  2. An use after free vulnerability in MessageTask can be exploited to cause denial of service.
  3. A data race vulnerability in crossbeam-deque can be exploited to obtain sensitive information.
  4. A security UI vulnerability in message validation can be exploited to spoof user interface.
  5. An use after free vulnerability in nsLanguageAtomService object can be exploited to cause denial of service.
  6. An use after free vulnerability in HTTP2 Session object can be exploited to cause denial of service.

オリジナルアドバイザリー

関連製品

CVEリスト

  • CVE-2021-38501
    critical
  • CVE-2021-38496
    critical
  • CVE-2021-38500
    critical
  • CVE-2021-38499
    critical
  • CVE-2021-32810
    critical
  • CVE-2021-38497
    high
  • CVE-2021-38498
    critical
  • CVE-2021-43535
    critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com

この脆弱性についての記述に不正確な点がありますか? お知らせください!
Kaspersky IT Security Calculator
も参照してください
新しいカスペルスキー
あなたのデジタルライフを守る
も参照してください
Do you want to save your changes?
Your message has been sent successfully.